Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

header-navigation
keyboard_arrow_up
close
keyboard_arrow_left
Junos CLI Reference
Table of Contents Expand all
list Table of Contents
file_download PDF
{ "lLangCode": "en", "lName": "English", "lCountryCode": "us", "transcode": "en_US" }
English
keyboard_arrow_right

dynamic-vpn

date_range 20-Nov-23

Syntax

content_copy zoom_out_map
dynamic-vpn {
    access-profile profile-name; 
    clients configuration-name {
        ipsec-vpn vpn-name;
        remote-exceptions ip-address/mask;
        remote-protected-resources ip-address/mask;
        user username;
        user-groups user-group-name;
    }
    config-check;
    force-upgrade;
    interface;
    traceoptions {
        file <filename> <files files> <match match> <size size> <(world-readable | no-world-readable)>;
        flag {
            all;
        }
        level (all | error | info | notice | verbose | warning);
        no-remote-trace;
    }
}

Hierarchy Level

content_copy zoom_out_map
[edit security]

Description

Configure the dynamic VPN feature. The dynamic VPN feature simplifies remote access by enabling users to create IPsec VPN tunnels without having to manually configure settings on their PCs or laptops. This feature is supported on SRX300, SRX320, SRX340, SRX345, and SRX550HM devices.

In Junos OS Release 21.4R1, we’ve deprecated the dynamic-vpn configuration statement and we might remove it completely in a future release.

Options

access-profile

Specify the access profile to use for Extended Authentication for remote users trying to download the Access Manager. This feature is supported on SRX300, SRX320, SRX340, SRX345, and SRX550HM devices.

clients

Create a client configuration for the dynamic VPN feature.

config-check

Enable extra dynamic VPN configuration checking. If you include this statement in your configuration, it is automatically enabled. If the statement is not present in your configuration, the configuration check option is not enabled. This feature is supported on SRX300, SRX320, SRX340, SRX345, and SRX550HM devices.

force-upgrade

Force upgrade.the dynamic vpn.

interface

Specify a list of interfaces to set the interfaces that allow access to dynamic VPN, separated by spaces. This feature is supported on SRX300, SRX320, SRX340, SRX345, and SRX550HM devices.

traceoptions

Configure dynamic VPN tracing options.

The remaining statements are explained separately. See CLI Explorer.

Required Privilege Level

security—To view this statement in the configuration.

security-control—To add this statement to the configuration.

Release Information

Statement introduced in Junos OS Release Release 9.5.

config-check and interface options introduced in Junos OS Release 12.1X44-D10.

footer-navigation